diff --git a/openupgrade_scripts/scripts/hr_attendance/17.0.2.0/post-migration.py b/openupgrade_scripts/scripts/hr_attendance/17.0.2.0/post-migration.py
index 7022dfb631c7..db971000e6b9 100644
--- a/openupgrade_scripts/scripts/hr_attendance/17.0.2.0/post-migration.py
+++ b/openupgrade_scripts/scripts/hr_attendance/17.0.2.0/post-migration.py
@@ -97,6 +97,23 @@ def hr_attendance_menus(env):
     )
 
 
+def add_attendance_own_reader_to_base_user(env):
+    """
+    Add hr_attendance.group_hr_attendance_own_reader to base.group_user's implied_ids.
+    This ensures all users have access to read their own attendance records.
+    """
+    group_user = env.ref("base.group_user")
+    group_attendance_own_reader = env.ref(
+        "hr_attendance.group_hr_attendance_own_reader"
+    )
+    if group_attendance_own_reader not in group_user.implied_ids:
+        group_user.write(
+            {
+                "implied_ids": [Command.link(group_attendance_own_reader.id)],
+            }
+        )
+
+
 @openupgrade.migrate()
 def migrate(env, version):
     fill_res_company_hr_attendance_display_overtime(env)
@@ -105,3 +122,4 @@ def migrate(env, version):
     openupgrade.delete_records_safely_by_xml_id(env, _deleted_xml_records)
     fill_hr_attendance_overtime_hours(env)
     hr_attendance_menus(env)
+    add_attendance_own_reader_to_base_user(env)